*.wrd-aws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:5f:68:1a:e3:00:18:22:5d:10:40:6d:d3:36:5f:72 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.wrd-aws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:5f:68:1a:e3:00:18:22:5d:10:40:6d:d3:36:5f:72
Serial Number (int): 12458431664409267825577677303804485490
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:aa:83:bb:41:01:32:9b:64:c0:2b:fc:f0:63:0c:35:b1:db:22:36
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): af:32:4e:0e:5a:fb:53:5f:56:38:81:70:48:7b:72:04:29:fa:72:26
Fingerprint (sha256): 79:17:47:12:71:36:a1:48:03:15:1b:78:1c:3a:7c:a4:a6:64:b2:b4:26:b1:94:e5:2f:b9:3e:27:25:c3:b5:89

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.wrd-aws.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wrd-aws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wrd-aws.com
www.myr-de.renault.ch
www.myr-it.renault.ch
renault.ch
*.renault.ch
www.myr-fr.renault.ch

Other certificates including the domain name wrd-aws.com

(limited to 100 certificates)
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
ren-it-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.public-alb-k8sone-dev-1-euw1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
static-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.internal.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com

Certificate

The complete raw certificate details for *.wrd-aws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBwhhmlmkqv/wD3pwGh
ChScvl5R5oNBMZ7luFk3eRuNflRNPGp9YtmdD8FhVR4rWF5ZxEDs9Jn8AyOFiIsA
MKjA21mGshT5t7BFqlIAvoxOjMo+yOPyVBA/P4Uw3uUyrZ3UOc9fSmTSt9f0TWA/
khQ0rfhUvG6RwwXXbBCeK6Q1Io/N6oaRRjaE9NCNZ5b5I6213trvcCFnV+UpfR7M
vSwbCBPxObF1v3xsuzkA0wz9oicDH68BJerj9m3/0/MfPPfETDfOVShR0zHv7Ebk
OI07g2ZjdrFYeEAVkXz7R0zooXfMqkhE0mBLgzFScL38iTbMH6r410xjMcy4fqCh
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12458431664409267825577677303804485490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wrd-aws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23101826557101427843355005580458510140143071399161888042146407141699910418329208989818015284184285311997373864471900244165796432258738555763550666678223804465588143487059171938878435080861536695873224048271735395456129715518241570683729322271993133105425163357493267222940002247284952555240652995061483992795961825985004514192853586341660213672814242408383592554622390934592821499829732541269980787313960551874155558748688500371751488420122596160720844531489766431507506764281042092902583059207199646864958405734534753480286210475251821020024304058561789674265191831714951840701310504672641029618033827452870113403149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2aa83bb4101329b64c02bfcf0630c35b1db2236
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrd-aws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-de.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-it.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-fr.renault.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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